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Abstract. Using Serre's proposed complement to Shih's Theorem, we obtain 
PSL2(¥ P ) as a Galois group over Q for at least 614 new primes p. Assum- 
ing that rational elliptic curves with odd analytic rank have positive rank, we 
obtain Galois realizations for | of the primes that were not covered by previ- 
ous results; it would also suffice to assume a certain (plausible, and perhaps 
tractable) conjecture concerning class numbers of quadratic fields. The key 
issue is to understand rational points on Atkin-Lchner twists of Xq(N). In an 
appendix, we explore the existence of local points on these curves. 



1. Introduction 

The notorious Inverse Galois Problem is to decide for which finite groups G there 
exists a Galois extension L/Q with Gal(L/Q) = G (for short, "G occurs over Q"). 
The optimistic guess that every finite group occurs over Q is natural for at least 
two reasons. First, by a famous theorem of Hilbert, it is enough to realize G as the 
Galois group of a regular extension L/Q(t). Now for any field K one says that a 
finite group G occurs regularly over K if it is the Galois group of a regular exten- 
sion L/K(t) 7 and there are many fields - e.g. C, K, Q p ... - over which every finite 
group is known to occur regularly. 

There is also the lure of inductive reasoning: it is known that many finite groups 
- e.g. solvable, symmetric and alternating groups - occur as Galois groups over Q 
(and, of course, no finite groups have been shown not to occur!). Still, the progress 
towards realizing all groups has been anything but steady: some of the "simplest" 
simple groups are still not known to occur. Consider, for instance, the family of 
groups PSL-2(V p ) as p ranges over prime numbers. 

Over thirty years ago, Shih showed that PSL 2 (¥ p ) occurs regularly over Q if for 
some N £ {2,3,7}, the Kronecker symbol (^) is equal to —1 8 . Later, Malle 
showed that (|) = —1 is also sufficient for PSL2(V P ) to occur regularly over Q 
Note that these two results leave a density i set of primes unaccounted for. To 
the best of my knowledge, no further occurrences of PSL2(¥ p ) over Q, regular or 
otherwise, have been established. 



In 1988 Serre proposed a method of extending Shih's theorem to realize new groups 
PSL 2 (¥ p ) over Q. This method is discussed in his book Topics in Galois Theory 
|10| . Referring to a calculation of Elkies, Serre remarks that the method works to 
realize PSX2OF47) over Q; notice that p = 47 is covered by Malle's result but not 
by Shih's. Strangely, no additional examples of the method are given or asked for. 
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In this paper we analyze Serre's method and show that it works to give realiza- 
tions of PSL2(¥ P ) over Q for many primes p not obtainable by any previous result. 



Serre's approach §5.4] begins with the following formulation of Shih's Theorem: 

Theorem 1. flU Theorem 8]) Let p* = (-l) £ i i p, and N £ Z + be such that 
( — ) = —1. Let C(N,p) be the curve obtained by twisting the modular curve Xq(N) 
using the Atkin-Lehner involution wjv 6 Aut(Xo(iV)) and the quadratic extension 



Q(\/p*)/Q- Then there is a regular Galois covering Y — > C{N,p), defined over Q, 
with Galois group PSL2(V p ). 

In the case that C(N,p) = P 1 , this means precisely that PSL 2 (¥ p ) occurs regularly 
over Q. This occurs for all p when N £ {2, 3, 7}, and we recover our earlier 
statement of Shih's Theorem. More generally, when C(N,p)(Q) ^ 0, there remains 
the possibility of finding an irreducible specialization. Indeed, we have the following 

Theorem 2. (Serre) With hypotheses as above, if C(N,p)(Q) is infinite, then 
there are infinitely many linearly disjoint Galois extensions L/Q with Galois group 



In other words, whereas Shih's theorem says that it suffices for C(N,p) = P 1 , The- 
orem|21says that it also suffices for C(N,p) to be an elliptic curve of positive rank. 

X (N) has genus one for N £ {11, 14, 15, 17, 19, 20, 21, 24, 27, 32, 36, 49}, 
so in order to realize PSL2(¥ p ) for primes p not covered by the results of Shih and 
Malle, the values of N to consider are 11, 17 and 19. 

Theorem 3. Let N = 11 or 19. For all primes p, C(N,p)(Q) ^ 0. so C{N,p) can 
be given the structure of a rational elliptic curve. More precisely, C(N,p) is the 
quadratic twist of Xq(N) by p* . Lt follows that: 

• For primes p = 1 (mod 4), (~) = —1 C(N,p) has odd analytic rank. 

• For primes p = —1 (mod 4), (~) = —1 C(N,p) has even analytic rank. 

Proof: Let a denote the nontrivial element of Gal(Q( 1 /p 5r )/Q). Then C(N,p)(Q) 
consists of those points P of C(N,p)(Q(y^p*)) for which wn(ct(P)) = P. In par- 
ticular, any P £ Xq(N)(Q) which is a fixed point of wn remains (Q-rational on 
C(N,p). For any squarefree N, let Si (resp. S2) be the set of C-isomorphism 
classes of elliptic curves with CM by the maximal order of Q(V~-N) (resp. by 
Z[V~ N]); these sets are distinct if and only if — N = 1 (mod 4). It is not hard to 
see that Si and S2 each gives rise to a set of WAr-fixed points - the To(N) structure 
is given by E[>/—N] - and that if N > 3, Si U S2 gives all the wjy-fixed points (e.g. 
O Prop. 3]). The set Si (resp. S2) forms a complete Gal(Q/Q) orbit. So there 
are Q-rational WN-&xed points exactly when Q(\/—N) has class number 1, which 
is the case for N = 11 and N = 19 (but not for N = 17). 

Thus, for N = 11 or 19, let O be the unique fixed point of wn that parame- 
terizes an elliptic curve with Z[ 1+ ^ ]-CM, so that (X (N),O) and (C(N,p),0) 
are rational elliptic curves. Since the j-invariant of Xq(N) is neither nor 1728, 
the group of automorphisms of (Xq(N),0) is ±1, and it follows that under our 
identifications we simply have wn = —I- In other words, the twist of Xq(N) via 
wn and Q(\/p*)/Q is just the quadratic twist by p* in the usual sense. Finally, the 



2. Analysis of Serre's Method 



G = PSL 2 (F P ). 
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sign of the functional equation for both Xo(ll) and Ao(19) is +1, so the sign of 
the functional equation for C(N,p) is x p *(— N) = (— — ). The result follows. 

We get as an immediate consequence our main result: 

Corollary 4. Assume that rational elliptic curves with odd analytic rank have 
positive Mordell- Weil rank. Then for every p with p = 1 (mod 4) and which is a 
quadratic nonresidue either modulo 11 or modulo 19, PSL2(¥ P ) occurs infinitely 
often as a Galois group over Q. 

However, when N = 17 Serre's method fails for local reasons: 



Proposition 5. For every prime p such that f — ] = —1, C(N,p)(Qn) = 0. 



Remark: The proof that follows is purely computational. More recently we have 
found other approaches: see Corollary 1 1 Ul and Theoremllllin the Appendix. 

Proof: For any squarefree N, the involution has at least one fixed point, so 
that the quotient map Xq(N) — > Xq(N) :— Xo(N)/wn is always ramified. In 
particular, when Xo(N) has genus one, Xq(N) has genus zero, and in fact - since 
Xq(N) always has Q-rational cusps - X+(iV) = P 1 . In particular, Wn gives a 
hyperelliptic involution on Xq(17), and Q(Xo(17)) = Q(x,y), where y 2 = P(x) for 
some quartic polynomial P £ and w : (x,y) i— ► (x,—y). Explicit polynomials 
have been computed by Elkies (unpublished) and Gonzalez; by [3 p. 794], we may 
take P(x) = x 4 + 2x 3 - 39x 2 - 176x - 212. Thus C(17,p) is given by the equation 



tively) by an element of Q* 2 , hence all such curves C(17,p) are Qi7-isomorphic to 
a single curve, say C(17, 5), and we are reduced to deciding whether this particular 
hyperelliptic quartic curve has Qi7-rational points. 

As a general principle, one knows that all Diophantine problems over local fields 
are decidable; in this case an analysis involving Hensel's Lemma shows that (af- 
ter ruling out rational points at infinity and projectivizing) it suffices to study a 
corresponding congruence modulo 17 5 . Thus in practice we will want computer 
assistance. Luckily for us, the issue of local points on hyperelliptic quartics arises 
in 2-descent, so that a relatively efficient algorithm for this - first described in 
the early work of Birch and Swinnerton-Dyer - has been implemented in several 
elliptic curve software packages. For instance, a query to John Cremona's program 
ratpoints results in the instantaneous response that C(17, 5) fails to have points 
rational over Q17 (and indeed also over Qg). This completes the proof. 



Fix N 6 {11,19}. If p = 1 (mod 4) is a prime satisfying (y) = —1, then we 
have seen that the analytic rank of C(N,p) is odd, so that it is, to say the least, 
widely believed that C(N,p) has infinitely many Q-rational points. In any given 
case one can, in principle, verify this just by finding a rational point of infinite 
order. Better yet: whenever the analytic rank is equal to 1, we know - thanks to 
the work of Gross-Zagier and Kolyvagin - that the rank is equal to one. And it is 
easy to check that the analytic rank is 1: one needs only to check that the special 




The condition (— ) 



p* y 2 = X A + 2x 3 - 39x 2 - 176x - 212. 

— 1 ensures that any two of the numbers p* differ (multiplica- 
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value L'(C(N,p),l) is nonzero, which is amenable to approximate computation. 
Moreover, when the sign in the functional equation is —1, the prevailing wisdom is 
that the analytic rank should be equal to 1 "most of the time." 
Indeed, among all primes p < 3 x 10 5 for which 

,.i 4,, r?wn - en - <?) - 1. 



pj \pj \pj \p 

it is never the case that the analytic rank of either C(ll,p) or C(19,p) is odd and 
greater than one. This yields a list of 612 prime numbers - the smallest is p = 1009 
- such that PSL2(¥ p ) newly occurs as a Galois group over Q. 

On the other hand, when p = — 1 (mod 4), the analytic rank of C(N,p) is no- 
ticeably less averse to being even and greater than zero. 1 Elkies' computation of 
rankC(ll,47) = 2 is an example of this. Among p < 1000, C(ll,p) also has (ap- 
parent) analytic rank 2 for 103, 599, and 683. The phenomenon is robust enough 
to persist upon enforcing the congruence conditions (|) = (|) = (|) = (|) = 1; for 

(1) p = 4079, 5591, 6719, 10391, 19319, 24359, 26759, 

either C(ll,p) or C(19,p) has (apparent) analytic rank 2. 

Example 1: 

[51362438166007626829703 : -4948233782238353787199293 : 5697234033382001683] 
is a nontorsion point on the curve 

C(ll, 4079) : Y 2 Z + YZ 2 = X 3 - X 2 Z - 171928490XZ 2 + 1571689994520Z 3 , 
so PSL 2 {¥ 4: q 79 ) occurs as a Galois group over Q. 

Example 2: [-99184162 : 21162527913 : 10648] is a nontorsion point on the curve 

C(19, 5591) : Y 2 Z + YZ 2 = X 3 + X 2 Z - 291753289XZ 2 + 204051 1796399Z 3 , 
so PSL 2 (F 55 <)i) occurs as a Galois group over Q. 

On the basis of these computations, it seems reasonable to conjecture that C(N,p) 
has positive rank for infinitely many primes p = — 1 (mod 4). 

4. Some Remarks 

There is a large literature on the variation of ranks of elliptic curves in a family of 
quadratic twists, but comparatively little has been said about the case of restricting 
to twists by prime numbers. Worth mentioning in this regard is the work of Ono 
and Skinner 0, which shows that for certain rational elliptic curves a positive 
proportion of prime twists have rank zero. There is as yet no analogous result for 
positive rank. Note however that Vatsal has shown that a positive proportion of all 
quadratic twists of Xo(19) have rank 1 [TT]. His argument could be readily adapted 
to the case of twists by primes in a given congruence class - and hence to give, 



^At least apparently: approximate calculation can strongly suggest, but not prove, that an 
elliptic curve has analytic rank > 2. 
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unconditionally, a new positive density set of primes p for which PSL2{¥ P ) occurs 
over Q - provided we knew the following: 

Conjecture 6. Fix coprime positive integers m and M , and let F(X) be the number 
of primes satisfying p < X, p = m (mod M), and such that the class number of 
Q(v^3p) is indivisible by 3. Then F(X) > X/logX. 

This conjecture may be within reach; by taking M — 4 and replacing Q(\/— 3p) 
with Q(- v /p), we get a theorem of Belabas and Fouvry pQ. 

Professor Shih has made me aware of the relevance of his later paper (jj] to the 
present work. Especially, this note can be viewed as responding to 9 , Remark 4] . 
What does not figure in [H] is the dichotomy between N = 11, 19 and N — 17 arising 
from the fact that the curves C(N,p) have Q-rational points in the former case but 
not in the latter case. Deciding which Atkin-Lehner twists of Xq(N) have points 
rational over Q (or even over all of its completions) is an interesting Diophantine 
problem which we address in the Appendix of this paper. 

The calculations of Section 3 have been extended, thanks to the help of Nick Rogers: 
in particular, for all the primes p in (1), rankC(ll,p) + rankC(19,p) > 0. Con- 
versely, after a wider search, we have still not been able to find any primes for which 
either C(ll,p) or C(19,p) has odd analytic rank > 3. It has been suggested to me 
by several people that it is "implausible" for, e.g., the ranks to be bounded in a 
family of quadratic twists by prime numbers. In response to this, I would like to 
say that I do not necessarily agree: although I am too far from being sufficiently 
expert in this matter to have an opinion of my own, I was not able to find in the 
literature any conjecture, heuristic or model (let alone any theorem) which would 
rule out, e.g., the statement that rankC(19,p) = 1 for all primes p = 1 (mod 4). 
In any case, the phenomenon seems to be worthy of further investigation. 

Appendix: Local Points on C(N,p) 
We suppose that N is squarefree and p is a prime number such that (y) = —1. 

The cusps of Xq(N) are Q-rational but freely permuted by u>n, so that if Q(y—N) 
has class number greater than one there are no "obvious" Q-rational points on 
C(N,p). Indeed, Shih found that in certain cases C(N,p) fails to have points even 
over certain completions of Q. 

For any nonsquare integer m, let C(N,m) denote the twist of Xq(N) by wn and 
Q(v / ro) /Q. As Ellenberg has pointed out 2 , Problem A], it is an interesting general 
problem to classify the "deficient places" of C(N,m), i.e., the primes £ < oo such 
that C(N,m)(Qi) = 0. We shall give some results in this direction. 

Proposition 7. C{N,p)(R) ^ 0. 

Proof: Let O be the ring of integers of Q( v / ^/V). Then E := C/O is an elliptic 
curve over the complex numbers such that P — (E, E[\/—N]) gives a WAr-fixed 
point. But complex conjugation on C induces an antiholomorphic involution on E, 
and it follows easily that j(E) e R and that P <E X (N)(R). Thus every Atkin- 
Lehner twist of Xq(N) has M-rational points. 
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Recall that a (nonsingular, projective) curve C/q ( is said to have good reduction if 
there exists a smooth arithmetic surface C /% t with generic fiber isomorphic to C . If 
C has positive genus, then it admits a unique minimal model Ci% whose smooth- 
ness is equivalent to the good reduction of C . On the other hand, there are only 
two curves of genus zero over Q^: P 1 (which has good reduction), and the twisted 
form corresponding to the unique division quaternion algebra over (which does 
not have good reduction). 

Proposition 8. Fix i prime to Np. Then C(N,p) has good reduction over Q^. In 
particular, if Xq(N) has genus at most one, C(N,p)(Qi) ^ 0. 

Proof: When X (N) has genus zero - i.e., when N G {2, 3, 5, 6, 7, 10, 13} - 
work of Shih gives a more precise result. Indeed, the genus zero curve C(N,p)/Q 
is classified up to isomorphism by a quaternion algebra. By 8, Prop. 10], this 
quaternion algebra is given by the Hilbert symbol (cjv,p*), where 

C2 = c 3 = 1, c 5 = 125, c 6 = 18, c 7 = 49, c w = 5, ci 3 = 13. 

The genus zero case follows (after a small calculation, when I = 2). 

Let us now assume that Xq(N) has positive genus. By a well known theorem 
of Igusa, Xq(N) has good reduction over Zg, so C(N,p) mt^p*) has good reduction 
at the places over I, Moreover i is unramificd in Q(y/p*), so that C(N,p)/Q t has 
good reduction after an unramified base change. Since formation of the minimal 
model commutes with unramified base change and smoothness can be checked on 
geometric fibers, this means that the minimal model C(N,p) /% e is itself smooth. 

Finally, if Xq(N) has genus one, then, since every smooth curve of genus at 
most one over the finite field Ff has an ^-rational point (e.g., by the Weil bounds), 
C(N,p)(Qe) ^ by Hensel's Lemma. 

The next result is a generalization of [SJ Prop. 10]. 

Theorem 9. (Gonzalez) C(N,p)/<Q admits a finite morphism to the genus zero 

12 

curve with corresponding quaternion algebra (cn, P*) , where cn = iV 'gcd(i2,w-i) _ 

Proof: See |SJ Thm. 6.2]. The argument is analytic in nature: one constructs a 
To(iV)-automorphic function G with Q-rational Fourier coefficients, and such that 
wn(G) = cjv/G- To see that this gives the theorem as we have stated it, apply the 
Exercise in [101 § 5.3]. 

Thus, if cat is not a norm from Q(Vp*) we deduce that C(N,p) has at least two 
deficient places. In particular we get the following sharpening of Proposition 

Corollary 10. The deficient places of C(Yl,p) are precisely I = p and £ = 17. 

Proof: By Theorem|51 C(17,p) maps to the genus zero curve V with corresponding 
quaternion algebra (17 3 , p*) (17, p*). Since V{Q e ) = for i = p and 17, 
a fortiori the same holds for C(17,p). That there are no other deficient places 
follows from Propositions [7| and 03 

Theorem 11. Suppose N is prime. Then C(N,p)(Q N ) = N = 1 (mod 4). 

Proof: Because Q(V — 2) and Q(V~ 3) have class number one, we may assume that 
N > 5. We shall apply the work of Mazur and Rapoport on the structure of the 
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minimal regular model for Xq(N) /q n [H] (especially relevant is the picture on p. 
177]). Recall that the special fiber Mo (TV) /p of the coarse moduli space consists of 
two rational curves intersecting tranversely along the supersingular points - with 
each supersingular point on X(l) getting glued to its Galois conjugate under 
the quadratic Frobenius map a : Fjya — > ¥^2. The Atkin-Lehner involution wn 
has the effect of interchanging the two branches, and the assumption that p* is a 
quadratic nonresidue modulo TV - note that (^) = (j^) - means that C(N,p) is the 
generic fiber of an arithmetic surface M(N,p)/z N which is the twist of Mq(N) /% N 
by a. In particular, the only Fjy-rational points on the special fiber of M(N,p) are 
the supersingular points, which are singular. 

However, as alluded to above, Mq(N) /% N is not necessarily a regular model of 
X (N)/q n . More precisely, if N = — 1 (mod 3), then j = must be blown up 
twice leading to a chain of two rational curves; and similarly if TV = — 1 (mod 4), 
j = 1728 must be blown up once leading to a single rational curve. Now a simi- 
lar procedure can be performed on M(N,p)z N1 to get a(n in fact minimal) regular 
model of C(N 7 p) /q n , which we shall denote by C(TV,p)/ Zjv ; we need only keep track 
of the effect of the twisted Gal(Fjv2/Fjv) action on these rational curves. In the 
j = case, the Galois action interchanges the two rational curves, hence leads to 
no new F^-rational points. However, in the j = 1728 case the Galois action the 
unique rational curve is evidently stabilized by the Galois action, yielding a smooth 
Fjv-rational curve of genus zero. But, as above, it is well known that every smooth 
genus zero curve over a finite field is isomorphic to the projective line, giving TV + 1 
rational points on the special fiber of Fjv- In summary, we have that a (minimal) 
regular model for C(N,p) over has Fjv-rational points if and only if TV = — 1 
(mod 4). We are done by Hensel's Lemma. 

Remark: The proof still goes through when TV = 2 or N = 3. In each case 
there is a unique supersingular point on the special fiber. The desingularization 
performed by successive blowups of this point leads to a chain of 11 rational curves 
when N = 2 and 5 rational curves when TV = 3. Since these numbers are odd, the 
Galois action stabilizes the middle element of the chain. 

Moreover, we have assumed N to be prime only for simplicity of exposition: for 
any squarefree TV and £ dividing TV, the argument gives a necessary and sufficient 
condition for C(N,p)(Qe) — 0, namely that (^-) = —1 and that there does not 
exist a supersingular point on Xq(N/£) / ¥e whose automorphism group is divisible 
by 4. We leave the task of converting this into an explicit congruence condition to 
the interested reader. 

Theorem 1111 gives a third proof of Proposition The relationship between Theo- 
remslilland llll fwhose proofs seem very different) is interesting: neither encompasses 
the other, although there is a substantial overlap: the implication <= of Theorem 
^2 a l so follows from Theorem [5] 

At present I do not know whether there is a similarly simple necessary and suf- 
ficient condition for C(N,p)(Q p ) — 0; whether there is ever a deficient prime £ not 
dividing Np; or whether C(N,p) can have no deficient places but still fail to have 
Q-rational points. 
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